CVE-2023-24279
14.03.2023, 01:15
A cross-site scripting (XSS) vulnerability in Open Networking Foundation ONOS from version v1.9.0 to v2.7.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the url parameter of the API documentation dashboard.
| Vendor | Product | Version |
|---|---|---|
| opennetworking | onos | 1.9.0 ≤ 𝑥 ≤ 2.7.0 |
𝑥
= Vulnerable software versions